AWS SQS Terraform module

Upstream version 5.2.2

2 controls from NIST Cybersecurity Framework v2.0 requirements

Terraform Module Source

nistcsf.compliance.tf/terraform-aws-modules/sqs/aws

Compliance Inputs Outputs Resources Diff (0)README

42 unique

Name	Type	Default	Description
Enforced · locked by active controls
kms_master_key_idsqs_queue_encrypted_with_kms_cmk	string	null	The ID of an AWS-managed customer master key (CMK) for Amazon SQS or a custom CMK
sqs_managed_sse_enabledsqs_queue_encrypted_at_rest	bool	true	Boolean to enable server-side encryption (SSE) of message content with SQS-owned encryption keys
Optional
content_based_deduplication	bool	null	Enables content-based deduplication for FIFO queues
create	bool	true	Whether to create SQS queue
create_dlq	bool	false	Determines whether to create SQS dead letter queue
create_dlq_queue_policy	bool	false	Whether to create SQS queue policy
create_dlq_redrive_allow_policy	bool	true	Determines whether to create a redrive allow policy for the dead letter queue
create_queue_policy	bool	false	Whether to create SQS queue policy
deduplication_scope	string	null	Specifies whether message deduplication occurs at the message group or queue level
delay_seconds	number	null	The time in seconds that the delivery of all messages in the queue will be delayed. An integer from 0 to 900 (15 minutes)
dlq_content_based_deduplication	bool	null	Enables content-based deduplication for FIFO queues
dlq_deduplication_scope	string	null	Specifies whether message deduplication occurs at the message group or queue level
dlq_delay_seconds	number	null	The time in seconds that the delivery of all messages in the queue will be delayed. An integer from 0 to 900 (15 minutes)
dlq_fifo_throughput_limit	string	null	Specifies whether the Dead Letter Queue FIFO queue throughput quota applies to the entire queue or per message group
dlq_kms_data_key_reuse_period_seconds	number	null	The length of time, in seconds, for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling AWS KMS again. An integer representing seconds, between 60 seconds (1 minute) and 86,400 seconds (24 hours)
dlq_kms_master_key_id	string	null	The ID of an AWS-managed customer master key (CMK) for Amazon SQS or a custom CMK
dlq_message_retention_seconds	number	null	The number of seconds Amazon SQS retains a message. Integer representing seconds, from 60 (1 minute) to 1209600 (14 days)
dlq_name	string	null	This is the human-readable name of the queue. If omitted, Terraform will assign a random name
dlq_queue_policy_statements	map({...})	null	A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
dlq_receive_wait_time_seconds	number	null	The time for which a ReceiveMessage call will wait for a message to arrive (long polling) before returning. An integer from 0 to 20 (seconds)
dlq_redrive_allow_policy	any	{}	The JSON policy to set up the Dead Letter Queue redrive permission, see AWS docs
dlq_sqs_managed_sse_enabled	bool	true	Boolean to enable server-side encryption (SSE) of message content with SQS-owned encryption keys
dlq_tags	map(string)	{}	A mapping of additional tags to assign to the dead letter queue
dlq_visibility_timeout_seconds	number	null	The visibility timeout for the queue. An integer from 0 to 43200 (12 hours)
fifo_queue	bool	false	Boolean designating a FIFO queue
fifo_throughput_limit	string	null	Specifies whether the FIFO queue throughput quota applies to the entire queue or per message group
kms_data_key_reuse_period_seconds	number	null	The length of time, in seconds, for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling AWS KMS again. An integer representing seconds, between 60 seconds (1 minute) and 86,400 seconds (24 hours)
max_message_size	number	null	The limit of how many bytes a message can contain before Amazon SQS rejects it. An integer from 1024 bytes (1 KiB) up to 1048576 bytes (1024 KiB). The default for this attribute is 262144 (256 KiB)
message_retention_seconds	number	null	The number of seconds Amazon SQS retains a message. Integer representing seconds, from 60 (1 minute) to 1209600 (14 days)
name	string	null	This is the human-readable name of the queue. If omitted, Terraform will assign a random name
override_dlq_queue_policy_documents	list(string)	[]	List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`
override_queue_policy_documents	list(string)	[]	List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`
queue_policy_statements	map({...})	null	A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
receive_wait_time_seconds	number	null	The time for which a ReceiveMessage call will wait for a message to arrive (long polling) before returning. An integer from 0 to 20 (seconds)
redrive_allow_policy	any	{}	The JSON policy to set up the Dead Letter Queue redrive permission, see AWS docs
redrive_policy	any	{}	The JSON policy to set up the Dead Letter Queue, see AWS docs. Note: when specifying maxReceiveCount, you must specify it as an integer (5), and not a string ("5")
region	string	null	Region where the resource(s) will be managed. Defaults to the Region set in the provider configuration
source_dlq_queue_policy_documents	list(string)	[]	List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s
source_queue_policy_documents	list(string)	[]	List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s
tags	map(string)	{}	A mapping of tags to assign to all resources
use_name_prefix	bool	false	Determines whether `name` is used as a prefix
visibility_timeout_seconds	number	null	The visibility timeout for the queue. An integer from 0 to 43200 (12 hours)